Still have the domain/SSO issue thought... trying to find out if theres a quick short-term band aid to achieve SSO while the internal team either sync those domain IDs using AD Connect or migrate their site data / identities to the primary domain ... backend server is Sharepoint btw..